Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8CE3EC2F35511EFBF2FC281762E951A.roa
File: C8CE3EC2F35511EFBF2FC281762E951A.roa (raw, json)
Hash identifier: JM6zN1Y3gfpc+t6UOEuQyTH0f9soz2FkGeN3lGM3zhc=
Subject key identifier: CD:44:43:E8:B0:28:5C:C4:92:E5:93:9A:15:AA:0C:51:89:46:8B:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015DC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8CE3EC2F35511EFBF2FC281762E951A.roa
Signing time: Tue 25 Feb 2025 08:52:04 +0000
ROA not before: Tue 25 Feb 2025 08:52:00 +0000
ROA not after: Mon 07 Apr 2025 08:52:00 +0000
asID: 63139
IP address blocks: 154.223.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89542 (0x15dc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 08:52:00 2025 GMT
Not After : Apr 7 08:52:00 2025 GMT
Subject: CN=67bd84b4-c760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:20:59:c1:89:5f:3c:92:ae:66:e3:1f:40:
c9:f4:bd:3a:3c:c7:9b:41:a5:58:f1:55:3b:26:b2:
4d:a7:f4:8b:59:7b:89:5f:e1:a2:8e:6e:dd:ed:44:
d3:42:e9:60:be:e0:f4:b6:48:c5:09:c7:25:1b:46:
1a:ec:b7:f3:d3:1a:61:d0:ba:dd:bb:72:71:ad:1e:
26:94:16:2e:9d:8d:c7:ca:c4:52:7d:08:2b:59:59:
36:1b:81:87:3e:9d:0b:90:dd:c3:9e:78:cc:90:2c:
c1:b9:96:f8:9f:0c:1d:c6:bb:11:5f:dd:66:41:ab:
12:e9:8d:3b:1c:c3:dc:01:84:09:e1:37:aa:64:30:
cb:26:cb:99:d5:25:ac:02:be:57:76:04:84:95:95:
ba:d8:76:c8:85:67:97:74:02:ef:12:93:f3:4a:5f:
b3:b2:d0:19:c2:9c:c1:55:86:71:41:62:80:82:e4:
36:2a:bb:56:d6:8e:6a:21:84:cb:c1:10:9f:87:df:
57:c3:30:d6:10:3d:6b:00:d0:a6:06:a3:39:82:0e:
45:5a:40:74:78:0a:9f:11:d2:78:04:7b:5d:36:58:
4f:d0:81:29:5e:3d:16:15:3c:08:e3:ae:07:2e:3b:
05:9c:82:81:c0:c1:d2:cc:cb:1c:b6:99:87:a5:fa:
5a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:44:43:E8:B0:28:5C:C4:92:E5:93:9A:15:AA:0C:51:89:46:8B:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8CE3EC2F35511EFBF2FC281762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.25.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:85:41:1e:2c:d8:8d:15:40:42:2c:8e:17:d0:82:2d:bf:ff:
05:12:21:00:ab:c7:52:35:54:aa:5d:d0:cd:09:1a:32:1d:bb:
4a:08:45:eb:30:8e:e5:83:7a:ab:0e:1c:84:e2:1f:db:bc:4f:
9d:07:f1:1b:54:68:b3:c6:c4:49:ec:d1:a1:f5:5a:e6:e0:5e:
dc:51:e6:11:bd:ca:c6:14:81:48:e1:27:da:2a:b2:12:f8:ea:
c2:0b:c0:34:fb:92:19:08:1c:c3:f0:2b:8c:46:80:fb:d2:50:
33:2e:68:d1:bf:24:5c:96:e4:41:02:59:8d:33:1a:a8:e5:ea:
56:e9:38:d4:41:7b:4c:ff:42:9c:69:8e:e9:87:88:d3:99:0a:
44:8e:78:f4:26:bb:81:2e:10:27:2f:9c:a2:f4:b3:86:b8:a5:
99:65:ac:f4:68:2a:55:6c:06:6f:97:54:27:a5:82:21:93:5e:
94:d3:5a:16:7d:f5:72:e6:97:6b:41:b1:97:49:9a:98:66:82:
b8:d3:9a:dc:ce:27:84:71:39:f1:02:9a:12:c3:32:83:8c:54:
dc:49:f5:88:2f:d8:a3:fc:ea:ff:df:4e:f5:82:69:9a:7c:ee:
da:f5:d6:44:8b:be:61:3e:94:e2:a7:48:8b:ca:0d:46:b8:8d:
96:0e:9c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:08:52 2025 by rpki-client